Privacy Policy

• Identity and profile-related data: first and last name, parents’ name, date of birth, gender, photographs, educational qualifications, purpose of loan, house ownership, employment status, company name, contact information (addresses, email IDs, phone numbers) and marital status.
• KYC data: identification documents issued by the government or other authorities, including Your Computerized National Identity Card (CNIC), Smart NICOP, Driver’s License, etc.
• Transaction data: details of transactions that may occur through the Platform or in connection with the Services (e.g., services You have sought or availed, confirmations of such services).
• Data from SMSs: with Your permission, We collect, transmit and store transactional SMS data from Your phone on Our secured CashUp server to verify and analyse Your financial position, to determine cash flow, credits, income, and spending pattern. We do not collect, read or store any personal SMSs or account details.
• Financial data: past credit history, income details, details of loans issued or applied for through the Platform, payments and repayments, bank account details, and bank account statements.
• Device data: IP addresses, browser types and versions, time zone settings, operating systems, and device information; collected and stored on Our secured CashUp server for analytics.
• App data: installed applications’ information (package names only) to assess creditworthiness and provide customized loan offers; stored on Our secured CashUp server.

2.2 We do not access Your contact list, call logs, telephony functions, or files & media (except to enable You to upload documents). We do not collect Your biometric data. We may request one-time access to camera, microphone, and location (fine and coarse GPS) solely for onboarding/KYC, each time with Your explicit consent. For certain Services, We may need to send SMS to verify Your device and phone number.

2.3 We are required to collect certain personal data to provide access to the Platform and Services or as required by law/Terms. If You fail to provide requested data, We may be unable to perform Our obligations and may cancel or limit Your access to the Services (or part thereof).

• Registering You as a user;
• Providing the Services;
• Communicating Service details and processing queries;
• Facilitating KYC;
• Facilitating loan applications and credit facilities from regulated entities;
• Enabling Services by partners (Lenders, Insurance Partners, Third Party Insurance Intermediaries, Partnered Deposit Facilitators, Digital Gold Providers);
• Managing Our relationship with You, including Service changes;
• Administering and protecting Our business and Platform (troubleshooting, analytics, testing, internal ops);
• Sending communications, including WhatsApp business messages and AI-bot-initiated calls;
• Conducting analytics and monitoring trends;
• Improving business and delivery models;
• Performing contractual obligations;
• Enforcing Our Terms;
• Marketing communications (including AI-initiated calls);
• Responding to court orders/legal claims;
• Ensuring compliance with applicable laws.

• Request erasure of Your personal data, subject to applicable laws and the terms of Services You have availed.
• Deny consent necessary to process Your personal data (which may impact Our ability to provide Services).
• Revoke consent previously provided for specific uses, storage, sharing with partners (Lenders, Insurance Partners, Third Party Insurance Intermediaries, Partnered Deposit Facilitators, Digital Gold Providers), and contact permissions, subject to applicable laws and terms.
• Rectify/update/amend previously provided information to ensure it is accurate, complete, and up to date. Denying/withdrawing consent, exercising the right to be forgotten, or providing inaccurate information may limit access to Services; We may refuse access accordingly.

9.2 Notwithstanding 9.1 (a) and 9.1 (c), We may retain information to:

• Comply with applicable laws;
• Enforce Our legal rights; or
• Provide information required by regulators investigating fraud or illegal activities.

9.3 Our Lenders, Insurance Partners, Third Party Insurance Intermediaries, Partnered Deposit Facilitators, and Digital Gold Providers may contact You regarding Your potential/actual use of Services, including loan applications and payment of dues. CashUp and Lenders may continue processing Your information if a loan application was sent to a Lender or a loan was availed, until all dues are paid. Lenders may store information as required by law and may require Us to retain information where services (e.g., collections) are outsourced to Us. AI systems/tools (in-house or third-party) may be used for tasks such as payment reminders and, for this purpose, Your information may be shared with such systems.

9.4 To exercise rights, email Us (Section 15) with details of the right(s) and the personal data You believe We hold/process to help locate it. We may request additional information.

9.5 We aim to reply within thirty (30) days of the request. If We cannot respond within this timeframe, We will inform You.